Поиск уязвимостей
Количество 9
Количество 9
BDU:2022-06030
Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2021-43531
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
CVE-2021-43531
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
CVE-2021-43531
When a user loaded a Web Extensions context menu, the Web Extension co ...
ALT-PU-2021-3391
ALT-PU-2021-3391: package `firefox` update to version 94.0-alt1
ALT-PU-2021-3215
ALT-PU-2021-3215: package `firefox` update to version 94.0-alt1
GHSA-r6p5-8pxg-2vcp
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
ALT-PU-2022-2458
ALT-PU-2022-2458: package `firefox-esr` update to version 102.1.0-alt1
ALT-PU-2022-2929
ALT-PU-2022-2929: package `firefox-esr` update to version 102.2.0-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-06030 Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.3 | 0% Низкий | около 5 лет назад |
 | CVE-2021-43531 When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94. | CVSS3: 4.3 | 0% Низкий | почти 5 лет назад |
 | CVE-2021-43531 When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94. | CVSS3: 4.3 | 0% Низкий | почти 5 лет назад |
| CVE-2021-43531 When a user loaded a Web Extensions context menu, the Web Extension co ... | CVSS3: 4.3 | 0% Низкий | почти 5 лет назад |
| ALT-PU-2021-3391 ALT-PU-2021-3391: package `firefox` update to version 94.0-alt1 | CVSS3: 10 | почти 5 лет назад | |
| ALT-PU-2021-3215 ALT-PU-2021-3215: package `firefox` update to version 94.0-alt1 | CVSS3: 10 | около 5 лет назад | |
| GHSA-r6p5-8pxg-2vcp When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94. | 0% Низкий | почти 5 лет назад | |
| ALT-PU-2022-2458 ALT-PU-2022-2458: package `firefox-esr` update to version 102.1.0-alt1 | CVSS3: 9.8 | около 4 лет назад | |
| ALT-PU-2022-2929 ALT-PU-2022-2929: package `firefox-esr` update to version 102.2.0-alt2 | CVSS3: 9.8 | около 4 лет назад |
Уязвимостей на страницу